$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json) Hash identifier: r2Q3ZTsMxZx0/ptuYRMy4MmEg3ObdfICB2r8mEHQ3vo= Subject key identifier: 0D:C6:18:B6:61:3E:16:F2:65:C3:B0:6C:EF:C4:68:AC:D7:46:1C:28 Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 0B2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft Manifest number: 0B24 Signing time: Wed 22 Jul 2026 19:39:20 +0000 Manifest this update: Wed 22 Jul 2026 19:39:20 +0000 Manifest next update: Wed 29 Jul 2026 19:39:20 +0000 Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: xLLCiriE1NsrpbuYpvkYQXGtO3nh1fFYA+s8U33iC7c=) 2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: bP8YW/usVEPebr8yo+q/K5uFmrIVy5PiorRcfqJheHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2862 (0xb2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: Jul 22 19:39:20 2026 GMT Not After : Jul 29 19:39:20 2026 GMT Subject: CN=6a611c68-2c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e5:ec:5d:d8:59:9a:b8:dc:39:cf:41:05:60: 32:e6:6b:51:26:e2:78:12:7c:ca:33:e2:82:10:87: 80:4e:d9:38:db:88:2c:bd:38:df:05:85:56:f2:48: 99:d7:5d:92:82:03:ef:29:96:dc:c0:10:d6:2c:02: 2b:42:21:74:1f:2e:62:21:6c:32:81:41:d3:04:14: 7e:36:86:6d:75:14:42:fe:54:6d:9c:a7:a1:d2:8d: da:96:04:c2:e2:fd:e0:32:71:b6:97:0f:d3:e4:62: b9:f0:7e:5b:43:a8:d9:e6:b9:d2:78:8e:af:ab:9f: 02:bd:06:c6:15:b1:87:8e:13:64:40:4a:11:8e:0c: f3:05:e3:df:d0:5a:dc:e3:bf:1c:59:78:68:cf:cf: 6a:c7:2a:77:48:fb:61:18:7d:55:83:2b:17:3b:41: 1d:8c:96:37:f3:c9:a8:49:2f:27:ce:14:e3:b7:41: 37:14:00:30:f4:10:b1:0f:52:a7:b0:a2:83:81:9c: b2:59:88:fc:c5:8b:d6:83:5b:84:e9:cf:dd:b1:50: 8e:8a:14:db:bf:6f:e3:85:ea:21:22:4a:13:f0:d5: e4:47:81:f2:07:32:f4:90:bf:fc:c3:29:60:f4:92: 19:b6:3e:5a:ac:bd:69:f5:cf:7c:e8:51:f9:a9:2a: 7b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C6:18:B6:61:3E:16:F2:65:C3:B0:6C:EF:C4:68:AC:D7:46:1C:28 X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ed:f3:a8:41:cb:c0:e5:a2:50:bb:08:75:6a:ba:dc:45:e6: 41:5f:98:27:43:ff:bd:01:5d:11:b7:f9:59:c3:62:63:3c:c7: 10:4b:d2:c6:07:85:e1:61:08:b8:c9:2c:55:4b:dd:8e:fb:76: 61:28:ad:6b:a4:81:b9:80:e8:be:83:a8:54:35:d0:db:ec:94: 4c:23:72:c1:d4:07:a4:6a:b0:c9:aa:77:02:36:67:07:f0:71: 7e:f7:1a:fc:37:45:45:cb:b8:69:6b:59:bb:dd:c7:e8:1f:27: e7:66:20:98:c5:bb:67:a6:54:45:cb:5e:c8:77:1b:86:5b:58: a0:f9:b9:3c:87:94:1c:5d:75:09:87:07:a8:82:44:68:73:13: 66:9e:d9:24:a8:e1:d9:e9:af:68:b2:1e:e4:79:99:93:77:8c: f1:d7:41:8f:1f:d0:60:02:68:1a:48:9b:69:e9:ea:b8:c8:bb: ab:69:05:db:64:8b:4c:67:51:dc:21:c9:c8:dc:af:62:72:9e: 11:b5:b5:88:61:c9:6b:b1:f7:1c:c0:d0:00:2f:1c:68:eb:e5: c3:15:5d:00:f4:70:27:2c:9a:52:4f:e7:b6:5a:89:a0:36:0a: db:18:bc:60:b2:05:79:e1:3a:74:13:e7:55:a2:94:3a:3b:b8: 01:8c:9a:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjYwNzIyMTkzOTIwWhcNMjYwNzI5MTkzOTIwWjAYMRYwFAYD VQQDEw02YTYxMWM2OC0yYzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7eXsXdhZmrjcOc9BBWAy5mtRJuJ4EnzKM+KCEIeATtk424gsvTjfBYVW8kiZ 112SggPvKZbcwBDWLAIrQiF0Hy5iIWwygUHTBBR+NoZtdRRC/lRtnKeh0o3algTC 4v3gMnG2lw/T5GK58H5bQ6jZ5rnSeI6vq58CvQbGFbGHjhNkQEoRjgzzBePf0Frc 478cWXhoz89qxyp3SPthGH1VgysXO0EdjJY388moSS8nzhTjt0E3FAAw9BCxD1Kn sKKDgZyyWYj8xYvWg1uE6c/dsVCOihTbv2/jheohIkoT8NXkR4HyBzL0kL/8wylg 9JIZtj5arL1p9c986FH5qSp7TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA3GGLZh PhbyZcOwbO/EaKzXRhwoMB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0 TTJIYlZadGJhNFBxNC04OEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQe3zqEHLwOWiULsIdWq63EXmQV+YJ0P/vQFdEbf5WcNiYzzHEEvSxgeF4WEI uMksVUvdjvt2YSita6SBuYDovoOoVDXQ2+yUTCNywdQHpGqwyap3AjZnB/Bxfvca /DdFRcu4aWtZu93H6B8n52YgmMW7Z6ZURcteyHcbhltYoPm5PIeUHF11CYcHqIJE aHMTZp7ZJKjh2emvaLIe5HmZk3eM8ddBjx/QYAJoGkibaenquMi7q2kF22SLTGdR 3CHJyNyvYnKeEbW1iGHJa7H3HMDQAC8caOvlwxVdAPRwJyyaUk/ntlqJoDYK2xi8 YLIFeeE6dBPnVaKUOju4AYyagw== -----END CERTIFICATE-----Generated at Fri Jul 24 01:59:08 2026 by rpki-client